Privacy Policy

1. Introduction

PZero Pte Ltd (“Company,” “we,” “us,” or “our”) operates the Bao Daily application (“App”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By using the App, you consent to the data practices described in this Privacy Policy. If you do not agree, please discontinue use of the App immediately.

This App is intended for users aged 17 and older. We do not knowingly collect information from users under 17.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, and profile information you provide during registration.

Content Data: Posts, drafts, notes, and other content you create within the App.

Voice and Writing Style Data: Text samples and writing patterns you provide for voice-matching features. This data is used to train a personalized voice model for your account only.

Social Media Credentials: OAuth tokens for the third-party platforms you connect for publishing: LinkedIn and X/Twitter. We store access tokens securely; we never store your platform passwords.

Payment Information: Subscription purchases are processed by Apple (App Store) or Google (Google Play), depending on where you downloaded the App. We do not directly collect or store credit card numbers or payment details.

Communications: Messages you send to our support team.

2.2 Information Collected Automatically

Device Information: Device model, operating system version, unique device identifiers, and mobile network information.

Usage Data: Features used, actions taken within the App, session duration, frequency of use, and interaction patterns.

Analytics Data: Crash reports, performance metrics, and diagnostic information.

Log Data: IP address, access times, pages viewed, and referring URLs when accessing our web services.

2.3 Information from Third Parties

When you connect social media accounts, we may receive limited profile information and content performance metrics (engagement, reach, impressions) from those platforms, subject to their privacy policies and your permissions.

3. How We Use Your Information

We use the information we collect to:

1. Provide, maintain, and improve the App and its features.
2. Generate AI-assisted content drafts personalized to your voice and style.
3. Process your content for scheduling and publishing to connected platforms.
4. Provide analytics on your content performance.
5. Curate content recommendations based on your niche and interests.
6. Process subscription payments and manage your account.
7. Send service-related communications (e.g., updates, security alerts).
8. Improve our AI models and algorithms using aggregated, de-identified data.
9. Detect, prevent, and address technical issues, fraud, or abuse.
10. Comply with legal obligations.

4. AI Processing and Data Use

The App uses artificial intelligence services to process your content. You should be aware of the following:

Content Processing: Your drafts and content are sent to AI service providers (including but not limited to Google Gemini and DeepSeek) for processing. This data is transmitted securely and used solely to generate responses for you.

Voice Model: Your voice and writing style data is processed to create vector embeddings stored in our database. These embeddings are used exclusively for your account to personalize AI-generated content.

No Training on Your Data: We do not use your personal content to train general-purpose AI models. Your content is processed in real-time and not retained by third-party AI providers beyond the duration of the API call, subject to their data processing agreements.

Content Discovery: The AI-curated discovery feed is powered by publicly available content sources (RSS feeds, public web content). Your personal data is not shared to generate discovery recommendations.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following limited circumstances:

Service Providers: We share data with third-party service providers who perform services on our behalf (hosting, analytics, AI processing, customer support). These providers are contractually obligated to use your data only as directed by us.

Named Subprocessors: The service providers who process personal data on our behalf are:

1. Supabase — hosting and database infrastructure.
2. Google (Gemini) and DeepSeek — AI processing of content you submit for generation.
3. RevenueCat — subscription and purchase management. Receives your user identifier and purchase history.
4. Sentry — crash and performance reporting. Receives crash logs, diagnostic data, and device identifiers.

Connected Platforms: When you publish content through the App, your content is transmitted to the social media platforms you have connected. This is initiated by you and subject to those platforms’ privacy policies.

Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

With Your Consent: We may share information for other purposes with your explicit consent.

6. Data Storage and Security

Your data is stored on secure cloud infrastructure (Supabase/PostgreSQL) with encryption at rest and in transit. We implement industry-standard security measures including:

1. TLS encryption for all data in transit.
2. AES-256 encryption for data at rest.
3. Row-level security policies ensuring users can only access their own data.
4. Regular security audits and vulnerability assessments.
5. Secure OAuth 2.0 token storage for connected platforms.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Specifically:

Account Data: Retained until you delete your account.

Content Data: Retained until you delete individual items or your account.

Voice/Style Data: Retained until you delete your account or reset your voice profile.

Usage Analytics: Retained in aggregated, de-identified form indefinitely for service improvement.

Log Data: Retained for up to 90 days for security and debugging purposes.

Upon account deletion, we will delete or de-identify your personal data within 30 days, except where retention is required by law.

8. Your Rights and Choices (Including Account Deletion)

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you.

Correction: Request correction of inaccurate personal data.

Deletion: Request deletion of your personal data (subject to legal retention requirements).

Portability: Request your data in a structured, machine-readable format.

Withdrawal of Consent: Withdraw consent for data processing where consent is the legal basis.

Opt-Out: Opt out of non-essential communications via App settings.

Account Deletion: You can delete your account and its associated data at any time, by either route:

1. In the App: Settings → Delete Account.
2. On the web: https://bao.pzerofoundry.com/delete-account.

Deletion is immediate and irreversible. Your account, content, voice profile, and connected-platform tokens are removed from our live systems when you confirm, and residual copies held in backups are purged within 30 days, as described in Section 7.

Deleting your account does not cancel an active subscription. If you subscribed through the App Store, cancel it in your Apple account settings; if you subscribed through Google Play, cancel it in the Google Play Store. Otherwise billing continues after your account is gone.

To exercise these rights, or to request deletion by email instead, contact us at support@pzerofoundry.com. We will respond within 30 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including Singapore, the United States, and other countries in the Asia-Pacific region. These countries may have data protection laws that differ from your jurisdiction.

Where required, we implement appropriate safeguards for international data transfers, including standard contractual clauses or equivalent mechanisms.

10. Third-Party Services

The App integrates with third-party services including social media platforms, AI providers, and analytics services. These third parties have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.

11. Apple App Store Privacy Requirements

In accordance with Apple’s App Store requirements, we disclose the following:

Data Used to Track You: We do not use your data to track you across apps or websites owned by other companies.

Data Linked to You: Account information, user content, usage data, and identifiers may be linked to your identity.

Data Not Linked to You: Aggregated analytics and crash data are collected in de-identified form.

12. Do Not Track

The App does not respond to “Do Not Track” signals. However, you can control data collection through your device settings and the privacy controls within the App.

13. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App and updating the “Effective Date.” Your continued use of the App after changes constitutes acceptance of the revised policy.

14. Data Protection Officer

For privacy-related inquiries or to exercise your data rights, contact our Data Protection Officer:

We aim to resolve all privacy complaints within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

15. Contact Us

For general questions about this Privacy Policy: